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DETAILED ACTION 

1 . In view of the Appeal Brief filed on October 9, 2008, PROSECUTION IS HEREBY 
REOPENED. A new ground(s) of rejection is set forth below. Claims 1-33 are pending. At this 
time, claims 1-33 are still rejected. 

To avoid abandonment of the application, appellant must exercise one of the 
following two options: 

(1) file a reply under 37 CFR 1 .1 1 1 (if this Office action is non-final) or a reply 
under 37 CFR 1 .1 13 (if this Office action is final); or, 

(2) initiate a new appeal by filing a notice of appeal under 37 CFR 41.31 
followed by an appeal brief under 37 CFR 41.37. The previously paid notice of appeal fee and 
appeal brief fee can be applied to the new appeal. If, however, the appeal fees set forth in 37 CFR 
41 .20 have been increased since they were previously paid, then appellant must pay the difference 
between the increased fees and the amount previously paid. 

Response to Arguments 

2. The Appeal Brief filed October 9, 2008 has been carefully considered by an Appeal 
Conference. The conferees agreed that the combination of teaching between Moy and Water 
does not teach the claimed subject matter wherein the password is automatically generated based 
on selected hints. Thus the finality of the office action mailed October 19, 2007 is now withdrawn. 
The office regrets any inconvenience due to the applicant. However, upon further consideration, a 
new ground(s) of rejection is made in view of Schneider (US 2004/0250138 A1) and McCulligh (US 
6,643,784 B1). 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form 
the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed in 
the United States before the invention by the applicant for patent or (2) a patent granted on an application for patent 
by another filed in the United States before the invention by the applicant for patent, except that an international 
application filed under the treaty defined in section 351 (a) shall have the effects for purposes of this subsection of an 
application filed in the United States only if the international application designated the United States and was 
published under Article 21(2) of such treaty in the English language. 
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4. Claims 1-7, 13-16, 19, and 23-33 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Schneider (US 2004/0250138 A1). 

a. Referrinp to claim 1: 

1. Schneider teaches a method for generating a password for a user 
(paragraph [0020-0021] of Schneider), comprising: 

(1) presenting said user with a plurality of hints (Figures 2-4 show 
the plurality of hints, such as an image of a tree 201, a person 202, a beachball 203 and a 
car 204, and paragraph [0021] of Schneider); 

(2) receiving a user selection of one of said hints; automatically 
generating a password based on said selected hint (Figures 2-4 and paragraph [0021-0022] of 
Schneider, wherein user creates password based on images, such as tree or beachball 
shown in Figure 2 or a sandwich, a banana, an apple, and a softdrink as shown in Figure 4, 
the password will be automatically genenerated after user finished selecting the images for 
their password); and 

(3) presenting said selected hint to said user to reinforce said 
generated password (Figures 2-4 and paragraph [0021-0022] of Schneider, wherein the 
selection of the beachball, picnic basket and sandwich in Figures 2-4 would represent the 
user's password). 

b. Referring to claim 2: 

i. Schneider further teaches: 

(1) wherein said plurality of hints include one or more of textual, 
audio or visual hints (Figures 2-4, such as beachball, picnic basket and sandwich of 
Schneider). 

c. Referring to claim 3: 

i. Schneider further teaches: 

(1) wherein said plurality of hints include one or more of poems, 
songs, jokes, pictures or words (Figures 2-4, such as beachball, picnic basket and sandwich 
of Schneider). 

d. Referring to claim 4: 

\. Schneider further teaches: 
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(1) wherein said generated password is further based on a user 
input (Figures 2-4 and paragraph [0021-0022] of Schneider, wherein user creates password 
based on images, such as tree or beachball shown in Figure 2 or a sandwich, a banana, an 
apple, and a softdrink as shown in Figure 4, the password will be automatically genenerated 
after user finished selecting the images for their password. 

e. Referrinp to claim 5: 

i. Schneider further teaches: 

(1) further comprising the step of presenting said selected hint and 
said generated password to said user at enrollment (Figures 2-4 and paragraph [0021-0022] of 
Schneider, wherein within an ATM, the first time a user uses the system, he/she must set a 
password, wherein the selection of the beachball, picnic basket and sandwich in Figures 2- 
4 would represent the user's password). 

f. Referring to claim 6: 

i. Schneider further teaches: 

(1) further comprising the step of sending said selected hint to said 
user as a reinforcement of said generated password (Figures 2-4 and paragraph [0021-0022] of 
Schneider, wherein the selection of the beachball, picnic basket and sandwich in Figures 2- 
4 would represent the user's password). 

g. Referring to claim 7: 

i. Schneider further teaches: 

(1) further comprising the step of recording said selected hint and 
said generated password in a record associated with said user (paragraph [0022] of Schneider, 
wherein Figure 1 shows the values in the Scene Registers 103, 104 and 105 would then be 
passed via an Interface Box 106 to a computer system at the bank so that the bank's 
computer system could now store this password for this user). 

h. Referring to claims 13-16. 23-25: 

i. These claims have limitations that are similar to those of claims 2-3, 
thus they are rejected with the same rationale applied against claims 2-3 above. 

i. Referring to claim 19: 
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i. This claim has limitation that is similar to those of claim 1 , thus they are 
rejected with the same rationale applied against claim 1 above, 
j. Referring to claim 26: 

i. Schneider further teaches: 

(1) wherein said user is queried about a resulting visual image from 
said selected subset of said image icons to obtain access to a protected resource (Figures 2-4, 
such as beachball, picnic basket and sandwich, and paragraph [0020] of Schneider), 
k. Referring to claim 27: 

i. This claim consist a apparatus for generating a password for a user to 
implement claim 1 , thus it is rejected with the same rationale applied against claim 1 above. 

ii. Schneider further teaches: 

(1) a memory; and at least one processor, coupled to the memory 
[i.e.. Figure 1, elements 102 and 107]. 

I. Referring to claims 28-29: 

i. These claims have limitations that is similar to those of claim 2, thus 
they are rejected with the same rationale applied against claim 2 above, 
m. Referring to claim 30: 

i. This claim has limitations that is similar to those of claim 4, thus it is 
rejected with the same rationale applied against claim 4 above, 
n. Referring to claim 31: 

i. This claim has limitations that is similar to those of claim 5, thus it is 
rejected with the same rationale applied against claim 5 above, 
o. Referring to claim 32: 

i. This claim has limitations that is similar to those of claim 6, thus it is 
rejected with the same rationale applied against claim 6 above, 
p. Referring to claim 33: 
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i. This claim has limitations that is similar to those of claim 7, thus it is 
rejected with the same rationale applied against claim 7 above. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set forth in section 
102 of this title, if the differences between the subject matter sought to be patented and the prior art are such that 
the subject matter as a whole would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the manner in 
which the invention was made. 

6. Claim 10-12, 20-22 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Schneider(US 2004/0250138 A1), and further in view of McCulligh (US 6,643,784 B1). 

a. Referring to claim 10: 

i. Although Schneider teaches a method for generating a password for a 
user using hint system (paragraph [0020-0021] of Schneider), Schneider is silent (if indeed is not 
inherent) on the capability of using hints as a plurality of words. On the other hand, McCulligh 
teaches: 

(1) wherein said plurality of hints includes a plurality of words and 
said generated password is based on a subset of said words selected by said user (column 7, 
lines 23-33 of McCulligh). 

ii. It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to: 

(1) have modified the invention of Schneider with the teaching of 
McCulligh (if indeed is not inherent in Schneider) for facilitating initial entry during password 
selection and generation that employ feedback as to whether or not a password has been properly 
initially entered or generated (column 1, lines 9-11 of McCulligh). 

iii. The ordinary skilled person would have been motivated to: 

(1) have modified the invention of Schneider with the teaching of 
McCulligh (if indeed is not inherent in Schneider) to overcomes the problem of the difficulty of 
memorizing many different passwords (last sentence, paragraph [0007] of Schneider). 

b. Referring to claim 11: 
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i. This claim has limitation that is similar to those of claims 2-3, 
thus they are rejected with the same rationale applied against claims 2-3 above, 
c. Referring to claims 12, 20-22: 

1. These claims have limitations that are similar to those of claim 
10, thus they are rejected with the same rationale applied against claim 10 above. 

7. Claims 8-9, and 17-18 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Schneider (US 2004/0250138 A1 ), and further in view of Serpa (US 6,954862 B2). 

a. Referring to claim 8: 

i. Although Schneider teaches a method for generating a password for a 
user using hint system (paragraph [0020-0021] of Schneider), Schneider is silent (if indeed is not 
inherent) on the capability wherein said selected hint is a poem, which could have been included in 
Figures 2-4 of Schneider, and said generated password has a similar rhyme and meter as said 
selected poem. On the other hand, Serpa teaches: 

(1) The pace, rhythm, or tempo of keystrokes becomes as much a 
part of the password as the actual letters, numbers, or symbols comprising the password. An 
unauthorized individual might still obtain the ID and password belonging to a legitimate user but, 
without knowledge of the correct timing element associated with the password, the information will 
be useless. Because the password is pace, rhythm, or tempo sensitive, access is restricted to 
those who know both the password and the pace, rhythm, or tempo of the password (column 4, 
lines 40-49 of Serpa). 

ii. It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to: 

(1) have modified the invention of Schneider with the teaching of 
Serpa (if indeed is not inherent in Schneider) to increase the security afforded by passwords and to 
make them easier to use (column 2, lines 24-26 of Serpa). 

iii. The ordinary skilled person would have been motivated to: 

(1) have modified the invention of Schneider with the teaching of 
Serpa (if indeed is not inherent in Schneider) to overcomes the problem of the difficulty of 
memorizing many different passwords (last sentence, paragraph [0007] of Schneider). 



Application/Control Number: 10/674,288 Page 8 

Art Unit: 2435 

b. Referring to claim 9: 

i. Although Schneider teaches a method for generating a password for a 
user using hint system (paragraph [0020-0021] of Schneider), Schneider is silent (if indeed is not 

inherent) on the capability wherein said plurality of hints includes a plurality of jokes, which could 
have been included in Figures 2-4 of Schneider, each containing one of a number of different 
variations for one or more variable words or phrases included in each joke and said generated 
password includes said variations for said one or more variable words or phrases. On the other 
hand, Serpa teaches: 

(1) The pace, rhythm, or tempo of keystrokes becomes as much a 
part of the password as the actual letters, numbers, or symbols comprising the password. An 
unauthorized individual might still obtain the ID and password belonging to a legitimate user but, 
without knowledge of the correct timing element associated with the password, the information will 
be useless. Because the password is pace, rhythm, or tempo sensitive, access is restricted to 
those who know both the password and the pace, rhythm, or tempo of the password (column 4, 
lines 40-49 of Serpa). 

ii. It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to: 

(1) have modified the invention of Schneider with the teaching of 
Serpa (if indeed is not inherent in Moy) to increase the security afforded by passwords and to 
make them easier to use (column 2, lines 24-26 of Serpa). 

iii. The ordinary skilled person would have been motivated to: 

(1) have modified the invention of Schneider with the teaching of 
Serpa (if indeed is not inherent in Schneider) to overcomes the problem of the difficulty of 
memorizing many different passwords (last sentence, paragraph [0007] of Schneider). 

c. Referring to claims 17-18: 

i. These claims have limitations that is similar to those of claims 1 and 8- 
9, thus they are rejected with the same rationale applied against claims 1 and 8-9 above. 

Conclusion 
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8. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Thanhnga (Tanya) Truong whose telephone number is 571-272- 
3858. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached at 571-272-3859. The fax and phone numbers for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 571-272-2100. 

/Thanhnga B. Truong/ 
Examiner, Art Unit 2435 
TBT 

December 29, 2008 
/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



